Clarify behavior of `.replace()` against uncontrolled documents.

Thanks to @annevk for the discussion.